| Age | Commit message (Expand) | Author | Files | Lines |
| 2022-04-22 | Merge tag 'v1.24.0'merge-tag | James Tucker | 0 | -0/+0 |
| 2022-04-22 | VERSION.txt: This is 1.25.0 | Denton Gentry | 1 | -1/+1 |
| 2022-04-22 | VERSION.txt: this is v1.24.0v1.24.0 | Denton Gentry | 1 | -1/+1 |
| 2022-04-22 | wgengine/{,magicsock}: add metrics for rebinds and restuns | Maisem Ali | 2 | -2/+15 |
| 2022-04-22 | net/dns/resolver: support magic resolution of via-<siteid>.<ip4> domains | Tom DNetto | 2 | -0/+48 |
| 2022-04-21 | util/mak: move tailssh's mapSet into a new package for reuse elsewhere | Brad Fitzpatrick | 8 | -34/+140 |
| 2022-04-21 | ssh/tailssh: avoid user ssh configuration in tests | James Tucker | 1 | -0/+2 |
| 2022-04-21 | tshttpproxy: support synology proxy configuration | James Tucker | 3 | -0/+446 |
| 2022-04-21 | cmd/tailscale: use double quotes in the ssh subcommands | Maisem Ali | 4 | -11/+4 |
| 2022-04-21 | cmd/tailscale/cli: do not use syscall.Exec from macOS sandbox | Maisem Ali | 1 | -2/+3 |
| 2022-04-21 | shell.nix: update go toolchain | Tom DNetto | 1 | -2/+2 |
| 2022-04-21 | ssh/tailssh: various typo fixes, clarifications. | David Anderson | 2 | -18/+19 |
| 2022-04-21 | ssh/tailssh: simplify matchRule with Reject rules | Brad Fitzpatrick | 1 | -1/+4 |
| 2022-04-21 | ssh/tailssh: chmod the auth socket to be only user accessible | Maisem Ali | 1 | -1/+5 |
| 2022-04-21 | ssh/tailssh: set groups and gid in the incubated process | Maisem Ali | 2 | -4/+32 |
| 2022-04-21 | ssh/tailssh: filter accepted environment variables | Brad Fitzpatrick | 2 | -1/+35 |
| 2022-04-21 | tailcfg: fix typo in SessionDuration field name | Brad Fitzpatrick | 2 | -5/+5 |
| 2022-04-21 | ssh/tailssh: add support for sftp | Maisem Ali | 3 | -45/+103 |
| 2022-04-21 | Revert "wgengine/router,util/kmod: load & log xt_mark" | Brad Fitzpatrick | 6 | -225/+0 |
| 2022-04-21 | net/dns/resolver, net/tsaddr: fix reverse lookups in 4to6 IP range | Tom DNetto | 3 | -2/+29 |
| 2022-04-20 | wgengine/router,util/kmod: load & log xt_mark | James Tucker | 6 | -0/+225 |
| 2022-04-20 | tailcfg: document SSHPrincipal.PubKeys URL expansions | Brad Fitzpatrick | 1 | -0/+4 |
| 2022-04-20 | ssh/tailssh: fix double SSH-2.0- prefix in greeting banner | Brad Fitzpatrick | 1 | -1/+1 |
| 2022-04-20 | ipn/ipnlocal: close peerapi listeners on LocalBackend.Shutdown | Brad Fitzpatrick | 1 | -0/+1 |
| 2022-04-20 | ssh/tailssh: send banner messages during auth, move more to conn | Maisem Ali | 8 | -193/+212 |
| 2022-04-20 | scripts/install: add Alma Linux. | Denton Gentry | 1 | -1/+1 |
| 2022-04-20 | scripts/installer: support LinuxMint Debian. | Denton Gentry | 1 | -7/+20 |
| 2022-04-20 | scripts/installer: call emerge with --ask=n | Denton Gentry | 1 | -1/+1 |
| 2022-04-20 | scripts/installer: add ParrotOS support | Denton Gentry | 1 | -0/+11 |
| 2022-04-20 | cmd/tailscale: add "debug via" subcommand to do CIDR math for via ranges | Brad Fitzpatrick | 2 | -0/+67 |
| 2022-04-20 | ssh/tailssh: support expansions in public key fetch URL too | Brad Fitzpatrick | 2 | -1/+37 |
| 2022-04-20 | ssh/tailssh: terminate ssh auth early if no policy can match | Maisem Ali | 5 | -154/+221 |
| 2022-04-20 | ipn/ipnlocal: use the fake peerapi listener as fallback if netstack available | Brad Fitzpatrick | 1 | -2/+9 |
| 2022-04-20 | wgengine/monitor: split the unexpected stringification log line | Maisem Ali | 1 | -2/+3 |
| 2022-04-20 | wgengine/monitor: ignore OS-specific uninteresting interfaces | Maisem Ali | 6 | -4/+32 |
| 2022-04-20 | ipn/ipnlocal: make peerapi listener on Android avoid the kernel | Brad Fitzpatrick | 1 | -0/+54 |
| 2022-04-20 | tstest/iosdeps: add test for forbidden iOS dependencies | Brad Fitzpatrick | 2 | -0/+104 |
| 2022-04-20 | ipn/ipnlocal: reject tailscale up --ssh if disabled on tailnet | Brad Fitzpatrick | 3 | -2/+12 |
| 2022-04-20 | wgengine/router: make supportsV6NAT check catch more cases | Brad Fitzpatrick | 1 | -2/+8 |
| 2022-04-20 | cmd/nginx-auth: maintainer scripts and tailnet checking (#4460) | Xe Iaso | 9 | -11/+107 |
| 2022-04-19 | cmd/proxy-to-grafana: prevent premature termination | Blake Mizerany | 1 | -5/+6 |
| 2022-04-19 | derp/derphttp,net/netcheck: improve netcheck behavior under MITM proxies | Tom DNetto | 2 | -12/+32 |
| 2022-04-19 | net/dns: schedule DoH upgrade explicitly, fix Resolver.Addr confusion | Brad Fitzpatrick | 10 | -165/+158 |
| 2022-04-19 | net/dns/resolver: count errors when racing DNS queries, fail earlier | Brad Fitzpatrick | 1 | -25/+34 |
| 2022-04-19 | net/dns: remove an unused function | Brad Fitzpatrick | 1 | -8/+0 |
| 2022-04-18 | tailcfg: clarify how SSHPolicy.Rules are evaluated between auth phases | Brad Fitzpatrick | 1 | -3/+15 |
| 2022-04-18 | ssh/tailssh: make checkStillValid also consider username changes | Maisem Ali | 1 | -2/+2 |
| 2022-04-18 | ipn/ipnlocal: also use SSHPolicies when updating filterHash | Maisem Ali | 1 | -1/+5 |
| 2022-04-18 | go.toolchain.rev: update to go1.18.1 (#4438) | Joe Tsai | 1 | -1/+1 |
| 2022-04-18 | hostinfo, tailcfg: add desktop detection on Linux to hostinfo | Tom DNetto | 4 | -1/+33 |